Installing A Standalone Data Recovery Manager; Data Recovery Manager's Key Pairs And Certificates - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

field you must enter the recovery agent password you specified during
installation. Then in the remaining fields, allow the key recovery agent to enter
the new password information. If you have more than one key recovery agent,
repeat this procedure for all the agents.
Old Password. Type the current password for the key repository.
New Password. Type the new password for the key repository.
Confirm Password. Retype the new password exactly as you typed it in the
previous field.
Click OK.
6.
You are returned to the Recovery Agent Password tab.

Installing a Standalone Data Recovery Manager

Data Recovery Manager's Key Pairs and
Certificates
The Data Recovery Manager uses the following key pairs and certificates:
• Transport Key Pair and Certificate
• Storage Key Pair
• SSL Server Key Pair and Certificate
Transport Key Pair and Certificate
Every Data Recovery Manager you have installed has a Data Recovery Manager
transport certificate. The public key of the key pair that is used to generate the
transport certificate is used by the client software to encrypt an end-entity's
encryption private key before it is sent to the Data Recovery Manager for archival;
only those clients capable of generating dual-key pairs (one for signing and one for
encryption) use the transport certificate. For more information on how this
certificate is used, see "Key Archival Process" on page 201.
The first time you generated this certificate is when you installed the Data
Recovery Manager. The default nickname for the certificate is
kraTransportCert cert-<instance_id>
CMS instance in which the Data Recovery Manager is installed.
Installing a Standalone Data Recovery Manager
, where
<instance_id>
Chapter 6 Data Recovery Manager
identifies the
215